Naxtia
Account
EN
Play ▶

← Back

Privacy Policy

What we store, why and what not.

MARWELLTECH LTDA (MARWELLTECH AND BLOODYBYTES), located at Av. Paulista, 777, São Paulo – SP, Brazil, hereinafter referred to as “Bloodybytes”, respects the privacy of users of Naxtia Online and recognizes the importance of protecting personal data processed while users access the game, website, and related services.

This Privacy Policy explains what information may be collected, how it may be used, how long it may be retained, and what rights users may have regarding their personal data.

Bloodybytes adopts reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, destruction, or misuse.

1. Data We May Collect

To provide Naxtia Online and its related services, Bloodybytes may collect and process different categories of information.

Registration Data

This may include:

  • username;
  • email address;
  • first and last name, when requested;
  • date of birth, when required;
  • internal account identifiers;
  • account-related preferences.

Authentication Data

This may include:

  • passwords stored using cryptographic hashing mechanisms;
  • authentication tokens;
  • session identifiers;
  • information related to account authentication and security.
Bloodybytes does not store user passwords in plain text.

Game-Related Data

While using Naxtia Online, information required for game operation and persistence may be stored, including:

  • characters;
  • inventory;
  • equipment;
  • skills;
  • attributes;
  • progression;
  • quests;
  • achievements;
  • guilds;
  • parties;
  • rankings;
  • in-game economy and transactions;
  • NPC interactions;
  • game world information;
  • technical records of relevant actions.

This information is necessary to maintain the persistence, integrity, and security of the multiplayer environment.

2. Technical and Usage Data

When accessing Naxtia Online through the website, game client, or related applications, certain technical information may be collected automatically.

This information may include:

  • IP address;
  • date and time of access;
  • client version;
  • game version;
  • platform;
  • browser;
  • operating system;
  • device information;
  • technical identifiers;
  • relevant hardware and software information;
  • connection records;
  • request logs;
  • client errors and crashes;
  • events related to game operation.

This information may be used for:

  • operating the services;
  • infrastructure monitoring;
  • error diagnosis;
  • incident investigation;
  • performance optimization;
  • information security;
  • fraud prevention;
  • abuse prevention;
  • investigation of Terms of Service violations;
  • identification of abnormal behavior;
  • improving the game experience.

3. Purposes of Data Processing

Personal data may be processed for purposes related to providing Naxtia Online services, including:

  • account creation and management;
  • authentication;
  • providing access to the game;
  • storing game progression;
  • synchronizing data between devices;
  • operating multiplayer systems;
  • enabling communication between players;
  • account recovery;
  • customer support;
  • payment processing;
  • maintaining security;
  • fraud prevention;
  • enforcement of the Terms of Service;
  • identifying and correcting technical problems;
  • performance analysis;
  • improving Bloodybytes systems and services;
  • compliance with legal or regulatory obligations.

4. Legal Bases for Processing

Where applicable, personal data may be processed under legal bases established by Brazilian data protection legislation, including the Brazilian General Data Protection Law – LGPD (Law No. 13,709/2018).

Depending on the purpose, processing may be based on:

  • performance of a contract or procedures related to services requested by the user;
  • compliance with legal or regulatory obligations;
  • exercise of legal rights;
  • Bloodybytes' legitimate interests, where applicable;
  • fraud prevention and protection of the data subject;
  • user consent, where specifically required.

Where processing is based on consent, consent may be withdrawn in accordance with applicable law.

5. Cookies and Similar Technologies

Websites and services related to Naxtia Online may use cookies, local storage, or similar technologies.

These mechanisms may be used to:

  • maintain authenticated sessions;
  • preserve preferences;
  • maintain settings;
  • improve security;
  • identify errors;
  • analyze service operation and performance.

Session cookies are generally temporary and may be removed after the session ends or according to browser settings.

Certain cookies may remain for longer periods when necessary for specific functionality.

6. Security, Fraud, and Abuse Prevention

Bloodybytes may analyze technical data, account information, and game-related events where necessary to protect Naxtia Online and its community.

Such analysis may be used to detect or investigate:

  • cheats;
  • bots;
  • unauthorized automation;
  • bug exploitation;
  • item duplication;
  • fraud;
  • account compromise;
  • unauthorized access attempts;
  • abuse of the game economy;
  • Terms of Service violations;
  • attacks against infrastructure;
  • abnormal technical behavior.

For these purposes, certain events performed within the game may be recorded and analyzed.

Technical logs and security records may be retained even after an account is deleted where retention is necessary for security, fraud prevention, legal claims, or compliance with legal obligations.

7. Support and Communications

When users contact Bloodybytes, information necessary to respond to and manage the request may be processed.

This may include information related to:

  • technical support;
  • reports;
  • account recovery;
  • payment issues;
  • bugs;
  • complaints;
  • suggestions;
  • personal data requests.

Communications with support staff may be recorded for follow-up, security, and request history purposes.

8. Player Communications

Certain Naxtia Online features may allow players to communicate with each other.

This may include:

  • public chat;
  • private messages;
  • party chat;
  • guild chat;
  • other social features made available within the game.

Messages and communication-related events may be temporarily stored or recorded where necessary for:

  • service operation;
  • moderation;
  • investigation of reports;
  • harassment prevention;
  • fraud prevention;
  • security;
  • enforcement of the Terms of Service.

9. Public In-Game Data

Certain information related to a character or account may be visible to other players as part of the normal operation of Naxtia Online.

Such information may include:

  • character name;
  • character appearance;
  • online status;
  • guild;
  • party;
  • ranking;
  • achievements;
  • public profile information;
  • visually displayed equipment or items;
  • other information explicitly presented as public within the game.

Personal registration information such as an email address will not normally be publicly displayed as part of a player's profile.

10. Payments and Transactions

When a user makes a purchase related to Naxtia Online, payment may be processed by external payment service providers.

Such providers may process information required to complete the transaction according to their own privacy policies.

Bloodybytes may receive transaction-related information, including:

  • purchase identifier;
  • purchased product;
  • amount;
  • currency;
  • transaction date;
  • payment status;
  • identifier provided by the payment processor.

Bloodybytes does not necessarily receive or store full payment card or financial instrument information used to complete the transaction.

11. Data Sharing

Bloodybytes does not sell users' personal data.

Information may be shared where necessary to operate Naxtia Online, including with service providers responsible for:

  • hosting and infrastructure;
  • storage;
  • content delivery;
  • authentication;
  • email delivery;
  • payment processing;
  • technical monitoring;
  • security;
  • customer support;
  • performance analysis.

Such providers may process only the information necessary to perform their respective services.

Information may also be shared where necessary for:

  • compliance with legal obligations;
  • compliance with court orders;
  • requests from competent authorities;
  • protection of Bloodybytes' rights;
  • fraud investigations;
  • protection of users or service security.

12. International Data Transfers

Some infrastructure, hosting, content delivery, monitoring, or other service providers used by Bloodybytes may operate servers outside Brazil.

As a result, certain data may be processed or stored internationally.

Where applicable, Bloodybytes will seek to implement appropriate mechanisms for protecting such data in accordance with applicable law.

13. Analytics and Metrics

Bloodybytes may use internal tools or third-party services to understand how Naxtia Online operates and is used.

These tools may process information such as:

  • pages visited;
  • features used;
  • session duration;
  • navigation events;
  • errors;
  • performance information;
  • campaign sources;
  • technical identifiers.

Where possible, information used exclusively for statistical analysis may be aggregated or pseudonymized.

14. Advertising and Campaigns

Campaigns related to Naxtia Online may use campaign, referral, source, or click identifiers to measure their effectiveness.

These identifiers may be used, for example, to understand how many users reached Naxtia Online through a particular campaign.

The use of this information will follow this Privacy Policy and, where required, applicable consent mechanisms.

15. Data Retention

Personal data will be retained for as long as necessary to fulfill the purposes described in this Privacy Policy.

Retention periods may vary depending on:

  • the nature of the data;
  • whether the account remains active;
  • operational requirements;
  • security requirements;
  • fraud prevention;
  • legal obligations;
  • establishment, exercise, or defense of legal claims;
  • administrative or financial recordkeeping requirements.

Once the relevant purpose has ended, information may be deleted, anonymized, or retained where such retention is permitted or required by applicable law.

16. Account Deletion

Users may request deletion of their account and associated personal data, subject to exceptions provided by applicable law.

Deleting an account may result in the permanent loss of:

  • characters;
  • inventory;
  • items;
  • currency;
  • progression;
  • achievements;
  • rankings;
  • settings;
  • other information associated with the account.
Account deletion may be irreversible.

Certain information may be retained after account deletion where necessary for:

  • compliance with legal obligations;
  • financial records;
  • fraud prevention;
  • security;
  • investigation of violations;
  • establishment, exercise, or defense of legal claims.

17. User Rights

Under applicable law, particularly the LGPD, users may have certain rights regarding their personal data.

These rights may include:

  • confirmation that processing occurs;
  • access to personal data;
  • correction of incomplete, inaccurate, or outdated data;
  • anonymization, blocking, or deletion where applicable;
  • data portability where provided by law;
  • information regarding data sharing;
  • information regarding the possibility of refusing consent;
  • withdrawal of consent;
  • deletion of data processed based on consent where applicable.

Privacy-related requests may be submitted to:

Email: [[email protected]](mailto:[email protected])

Bloodybytes may request information necessary to verify the identity of the requester before fulfilling certain requests.

18. Data Security

Bloodybytes seeks to adopt technical and administrative safeguards appropriate to the nature of its services in order to reduce information security risks.

Such measures may include:

  • encrypted communications;
  • secure credential storage;
  • access controls;
  • monitoring;
  • audit logs;
  • infrastructure protection;
  • backups;
  • authentication mechanisms;
  • secure development practices.

No internet-connected system can guarantee absolute security. Therefore, despite the measures adopted, it is not possible to guarantee that security incidents will never occur.

19. Children and Teenagers

The processing of personal data belonging to children and teenagers will comply with applicable legal requirements.

Where necessary, additional consent, verification, or functionality restrictions may be implemented.

Parents or legal guardians who believe that a child's personal data has been improperly provided may contact Bloodybytes at:

Email: [[email protected]](mailto:[email protected])

20. Third-Party Services and Links

Naxtia Online may contain integrations with or links to external services.

These services may maintain their own privacy policies and terms of use.

Bloodybytes does not control the data processing practices of independent third-party services.

Users are encouraged to review the applicable policies before providing information directly to such services.

21. Changes to This Policy

This Privacy Policy may be updated periodically to reflect:

  • changes to Naxtia Online;
  • new features;
  • infrastructure changes;
  • new service providers;
  • changes to data processing practices;
  • legal or regulatory developments.

Material changes may be communicated through the official website, the game, or official Bloodybytes communication channels.

The date shown at the beginning of this Policy identifies its most recent version.

22. Contact

For questions, requests, or concerns regarding this Privacy Policy or the processing of personal data:

MARWELLTECH LTDA (MARWELLTECH AND BLOODYBYTES)

Email: [[email protected]](mailto:[email protected])